CLAIMS 

What is claimed is: 

1. A user terminal capable of communicating with a wireless access network, the user 
terminal comprising: 

a memory to store an identity certificate signed by a certificate authority to be used 
by an access point of the wireless access network to authenticate the user terminal, the 
identity certificate being based, at least in part, on hardware included in the user terminal. 

2. The user terminal of claim 1, wherein the identity certificate includes a serial 
number of the user terminal. 

3. The user terminal of claim 2, wherein the serial number comprises a Media Access 
Control (MAC) address of the user terminal. 

4. The user terminal of claim 1, wherein the identity certificate is factory seeded into 
the memory of the user terminal. 

5. The user terminal of claim 1, wherein the identity certificate authenticates the user 
terminal to multiple wireless access networks. 
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6. A method comprising: 

authenticating a user terminal of a wireless access network by an access point of the 
wireless access network using an identity certificate signed by a certificate authority, the 
identity certificate being bound to user terminal hardware. 

7. The method of claim 6, wherein the identity certificate being bound to user terminal 
hardware comprises the identity certificate including a serial number of the user terminal. 

8. The method of claim 7, wherein the serial number comprises a Media Access 
Control (MAC) address of the user terminal. 

9. The method of claim 6, further comprising authenticating the user by an access 
point of a second wireless access network using the identity certificate. 

10. The method of claim 6, wherein the identity certificate is factory seeded into the 
user terminal. 

11. An access point of a wireless access network, the access point comprising: 

a receiver to receive an authenticator message from a user terminal capable of 
communicating with the wireless access network that is requesting access, the authenticator 
message including an identity certificate of the user terminal signed by a certificate 
authority, the identity certificate being bound to user terminal hardware; and 
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a processor coupled to the receiver to authenticate the user terminal using the 
identity certificate. 

12. The access point of claim 1 1, wherein the identity certificate being bound to user 
terminal hardware comprises the identity certificate including a serial number of the user 
terminal. 

13. The access point of claim 12, wherein the serial number comprises a Media Access 
Control (MAC) address of the user terminal. 

14. The access point of claim 11, wherein the identity certificate is factory seeded into 
the user terminal. 

15. A digital certificate to be seeded into a user terminal capable of communicating 
with a wireless access network, the certificate comprising: 

a serial number of the user terminal; 

an identification of a certificate authority that signs the certificate; and 
a signature of the identified certificate authority. 

16. The certificate of claim 15, wherein the serial number comprises a Media Access 
Control (MAC) address of the user terminal. 
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17. The certificate of claim 15, wherein the certificate authenticates the user terminal to 
multiple wireless access networks. 

18. A machine-readable medium having stored thereon data representing instructions 
that, when executed by a processor of an access point of a wireless access network, cause 
the processor to perform operations comprising: 

authenticating a user terminal of a wireless access network using an identity 
certificate signed by a certificate authority, the identity certificate being bound to user 
terminal hardware. 

19. The machine-readable medium of claim 18, wherein the identity certificate being 
bound to user terminal hardware comprises the identity certificate including a serial 
number of the user terminal. 

20. The machine-readable medium of claim 19, wherein the serial number comprises a 
Media Access Control (MAC) address of the user terminal. 

21. The machine-readable medium of claim 18, wherein the instructions further cause 
the processor to authenticate the user by an access point of a second wireless access 
network using the identity certificate. 

22. The machine-readable medium of claim 18, wherein the identity certificate is 
factory seeded into the user terminal. 
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